{"instruction": "You are an expert in event extraction. Please extract events from the input that conform to the schema definition. Return an empty list for events that do not exist, and return NAN for arguments that do not exist. If an argument has multiple values, please return a list. Respond in the format of a JSON string.", "schema": [{"event_type": "ransom", "trigger": true, "arguments": ["attacker", "attack pattern", "victim", "payment method", "place", "tool", "price"]}, {"event_type": "data breach", "trigger": true, "arguments": ["attack pattern", "place", "tool", "number of victim", "attacker", "time", "victim", "purpose", "compromised data"]}, {"event_type": "discover vulnerability", "trigger": true, "arguments": ["common vulnerabilities and exposures", "vulnerable system version", "vulnerable system owner", "capabilities", "supported platform", "vulnerability", "time"]}, {"event_type": "phishing", "trigger": true, "arguments": ["attacker", "damage amount", "attack pattern", "victim", "time", "trusted entity", "purpose", "tool", "place"]}], "input": "\" Another trend we have observed in recent years is that scammers are using the lures mentioned above , but instead of providing a link to an external website , they are attaching an HTML page and asking users to open this ' secure page ' that requests login credentials and financial information , \" according to Narang ."}
{"ransom": [], "data breach": [], "discover vulnerability": [], "phishing": [{"trigger": "lures", "arguments": {"attacker": "scammers", "damage amount": "NAN", "attack pattern": "asking users to open this ' secure page '", "victim": "NAN", "time": "recent years", "trusted entity": "NAN", "purpose": "requests login credentials and financial information", "tool": "a link", "place": "NAN"}}]}